CVE-2026-9653 - 1756-EN2, 1756-EN3, and 1756-ENBT - Denial of Service via CIP Connection ID

Back Back to CVE browser

HIGH

1756-EN2, 1756-EN3, and 1756-ENBT - Denial of Service via CIP Connection ID

Published Jul 14, 2026

8.7

HIGH

CVSS 4.0

EPSS 0.23%

Description

A denial-of-service security issue exists across all the 1756-EN2, EN3, and ENBT communication module due to improper validation of CIP Implicit Connection packets. An attacker on the network can exploit this by sending crafted packets to continuously disrupt device connections, though device connections will recover immediately after.

Affected products

Vendor Rockwell Automation Product 1756-ENBT Default
unaffected
- Version
  6.006
  Status
  affected
  Constraints
  -
Vendor Rockwell Automation Product n/a Default
unaffected
- Version
  12.001 and before
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Rockwell Automation

1756-ENBT

unaffected

Version	Status	Constraints
6.006	affected	-

Rockwell Automation

n/a

unaffected

Version	Status	Constraints
12.001 and before	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-354

References (1)

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1780.html

Link	Providers	Tags
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1780.html

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Rockwell

Published Jul 14, 2026

Updated Jul 14, 2026

Reserved May 26, 2026

Link CVE-2026-9653

CISA Vulnrichment

Updated Jul 14, 2026

NVD

Status Awaiting Analysis

Modified Jul 14, 2026

Link CVE-2026-9653

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-9653